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Top Stories 

• U.S. 26 in Oregon remained closed August 24 after initially closing August 22 for 
approximately 12 hours due to a brush fire. - KGW 8 Portland (See item 4) 

• Lookout released a report revealing that 14,622 Lookout-enabled devices across 20 Federal 
agencies encountered 1,781 app-based threats and that 18 percent of Federal employees 
with personal and government-issued smartphones reported encountering malicious 
software, among other findings. - Help Net Security (See item 15 ) 

• Crews reached 10 percent containment August 24 of the Okanogan Complex Fire that has 
burned over 400 square miles in Washington and is now the largest fire in State history. - 
Associated Press (See item 16 ) 

• A man died of a self-inflicted gunshot wound after entering a Federal building in New 
York August 21, and shooting and fatally injuring a security officer. - WCBS 2 New York 
City (See item 24) 
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Energy Sector 



Nothing to report 

Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

1. August 23, Cape Cod Times - (Massachusetts) Pilgrim nuclear plant shuts down 
after valve malfunction. U.S. Nuclear Regulatory Commission and Entergy officials 
reported that the Plymouth Pilgrim Nuclear Power Station’s reactor shut down 
automatically August 22 after a reactor-turbine steam transfer valve inadvertently 
closed. No concerns were identified in connection to the incident, and officials reported 
no timeline for the plant to return online. 

Source: http://www.capecodtimes.com/article/2015Q823/NEWS/150829771 

Critical Manufacturing Sector 

2. August 24, The Register - (International) Samsung smart fridge leaves Gmail logins 
open to attack. Security researchers from Pen Test Partners discovered a Secure 
Sockets Layer (SSL) vulnerability in Samsung’s RF28HMELBSR smart fridge in 
which a man-in-the-middle (MitM) attacker could use a fake Wi-Fi access point and 
deauthentication to steal Google login credentials via the refrigerator’s calendar client. 
Source: http://www.theregister.co.uk/2015/08/24/smart fridge security fubaiV 

Defense Industrial Base Sector 

Nothing to report 

Financial Services Sector 

3. August 21, South Florida Sun-Sentinel - (Florida) ‘Lucky Bandit’ pleads guilty to 
bank robbery charges. A man believed to be the suspect dubbed the “Lucky Bandit” 
pleaded guilty August 21 to attempting to rob a Citibank branch and to robbing a Wells 
Fargo bank in Pembroke Pines last April. 

Source: http://www.sun-sentinel.com/local/broward/fl-luckv-bandit-pleads-brf- 
20150821-story.html 



Transportation Systems Sector 

4. August 24, KGW 8 Portland - (Oregon) U.S. 26 remains closed Monday due to 
brush fire near Manning. U.S. 26 in Manning, Oregon, remained closed August 24 
after initially closing August 22 for approximately 12 hours due to a brush fire. The 
roadway was reopened and closed again August 23 while crews worked to contain the 
fire. 
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Source: http://www.kgw.com/storv/news/local/washington-countv/2015/08/22/hwv-26- 
clo sed-near-mannin g-bec au se-bru sh- fire/3 22 15783/ 

5. August 24, KWGN 2 Denver - (Colorado) Semitruck ruptures fuel tank, snarling 
both directions of 1-70 at Quebec Street. One eastbound lane and 2 westbound lanes 
of Interstate 70 were closed for over 2 hours August 24 after a semi-truck blew a tire 
and hit the center median in Denver, spilling several gallons of fuel. 

Source: http://kwgn.com/2015/08/24/semitruck-ruptures-gas-tank-in-accident-snarling- 
both-directions-of-i-70/ 

6. August 24, WNEW 99.1 FM Bowie - (Virginia) VRE delays Monday morning after 
person struck, killed by train. Virginia Railway Express train service was halted for 
at least 3 hours August 24 due to a fatal crash involving a pedestrian near the Leeland 
Road and Dahlgren Junction on the Fredericksburg Line. 

Source: https://washington.cbslocal.com/2015/08/24/vre-delavs-mondav-morning- 
person-struck-train/ 

7. August 24, KXAN 36 Austin- (Texas) Highway 290 Frontage Road reopens after 
tanker spill. Westbound lanes of Highway 290 Frontage Road at Johnny Morris Road 
in Austin reopened August 24 after they were closed August 23 when a semi-truck 
carrying gasoline rolled over and leaked an estimated 1,000 gallons of gas before crews 
stopped the leak. 

Source: http://kxan.com/2015/08/23/tanker-rollover-causes-intersection-closure-on- 
east-highway-290/ 

8. August 23, WX1N 59 Indianapolis- (Indiana) Gasoline tanker crashes leaking fuel in 
1-65 detour route. A semi- truck carrying 5,000 to 8,000 gallons of fuel overturned on 
the U.S. 231 ramp to Interstate 65 in White County, Indiana, spilling a large amount of 
fuel. The northbound roadway was closed for an undetermined amount of time while 
crews cleared the scene. 

Source: http://fox59.com/2015/Q8/23/gasoline-tanker-crashes-leaking-fuel-in-i-65- 
detour-route/ 

9. August 22, WOWK 13 Huntington - (West Virginia) School bus and car collide near 
Union; Route 219 reopened. Twelve Mountain View High School students and 2 
others were injured in a school bus accident on Route 219 in the town of Pickaway, 
West Virginia, August 21. The roadway was closed for approximately 5 hours while 
authorities investigated the incident. 

Source: http://www.wowktv.com/storv/29853825/bus-and-car-collide-near-union 

10. August 21, Grand Rapids Press - (Michigan) Multiple semi trucks destroyed in early 
morning business fire. An August 21 fire at Freightliner of Grand Rapids in Michigan 
severely damaged six semi-trucks parked in an outside lot. Officials were able to 
contain fuel leaking from the trucks and no injuries were reported. 

Source: http://www.mlive.com/news/grand- 
rapids/index.ssf/2015/08/multiple semi trucks destroyed.html 



- 3 - 



For another story, see item 19 

Food and Agriculture Sector 

11. August 22, Food Safety News - (National) Investigation over into outbreak linked to 
recalled frozen tuna. The U.S. Centers for Disease Control and Prevention announced 
that an investigation into Salmonella-tainted yellowfin tuna that sickened at least 65 
people from 1 1 States was over, but warned the public that the recalled frozen tuna 
linked to the outbreak may still be in freezers. Health officials urged retailers and 
restaurants to remove the tuna and carefully check labels. 

Source: http://www.foodsafetvnews.com/2015/08/cdc-investigation-into-outbreak- 
linked-to-recalled-frozen-tuna-is-over 



Water and Wastewater Systems Sector 

12. August 23, KNSD 39 San Diego - (California) Sewage spill closes Santa Clara Cove. 
San Diego officials confirmed August 23 that the beach in Mission Bay’s Santa Clara 
Cove in San Diego will be closed until further notice after an undetermined amount of 
sewage spilled into the cove due to a blockage in a nearby sewer line. County 
Environmental Health officials are collecting samples and are investigating the how 
long the cove will be closed and the cause of the spill. 

Source: http://www.nbcsandiego.com/news/local/Santa-Clara-Cove-Sewage-Closure- 
322635051.html 



13. August 21, Associated Press - (Iowa) Toxic algae prompts record number of Iowa 
beach advisories. The Iowa Department of Natural Resources confirmed August 21 
that they are investigating 9 cases of possible human exposure to toxic algae after 
reaching a record of 27 beach advisory warnings this summer due to blue algae blooms. 
Source: http://www.nonpareilonline.com/news/state/wire/toxic-algae-prompts-record- 
number-of-iowa-beach-advisories/article ba9b2de2-5 193-5442-6550- 
b7 1 847e02ea4.html 



Healthcare and Public Health Sector 

14. August 23, Wall Street Journal - (New York) Brooklyn Medicaid fraud case settled. 
The New York attorney general’s office announced August 23 that Brooklyn-based 
Empire State Home Care Services will pay $6 million as part of a settlement reached 
after officials alleged that the home-care company falsified salary reporting and 
benefits of administrative personnel as direct-care costs, and received inflated Medicaid 
reimbursements between 2004 and 2007. 

Source: http://www.wsi.com/articles/brooklyn-medicaid-fraud-case-settled- 
1440381600 

Government Facilities Sector 

15. August 24, Help Net Security - (International) Risky mobile behaviors are prevalent 
in the government. Lookout released findings from a report revealing that 14,622 
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Lookout-enabled devices across 20 Federal agencies encountered 1,781 app-based 
threats, that employees use personal mobile devices in various ways that can 
compromise agency network security, and that 1 8 percent of Federal employees with 
personal and government-issued smartphones reported encountering malicious 
software, among other findings. 

Source: http://www.net-security.org/secworld.php?id=18790 

16. August 24, Associated Press - (Washington) Washington wildfire is now largest in 
state history. Crews reached 10 percent containment August 24 of the Okanogan 
Complex Fire that has burned over 400 square miles in Washington and is now the 
largest fire in State history. Firefighters battled 16 other wildfires in central and eastern 
Washington covering over 940 square miles that have damaged or destroyed more than 
200 homes. 

Source: http://www.msn.com/en-us/news/us/im-alive-%E2%80%94-people-survey- 
damage-from-washington-fire/ar-BBm2hHc 

17. August 24, KFSN 30 Fresno - (California) Residents worry as Rough Fire grows to 
nearly 50,000 acres. Crews reached 7 percent containment August 24 of the 49,440- 
acre Rough Fire burning in Fresno County. Closure orders remained in effect for a 
portion of the Sierra National Forest, Black Rock Campground, and the Hume Lake 
recreation area. 

Source: http://abc30.com/news/residents-worrv-as-rough-fire-grows-to-nearly-50000- 
acres/953478/ 



18. August 24, Associated Press - (Pennsylvania) Kutztown University freshman dorm 
evacuated for fumes. Deatrick Hall at Kutztown University in Pennsylvania was 
evacuated for nearly 3 hours August 23 after unknown fumes caused 12 students, 3 
custodians, 2 firefighters, and 2 police officers to be treated for throat irritation and 
coughing. A HAZMAT team reported to the building and deemed it safe to re-enter 
following an investigation. 

Source: http://www.fairfieldcitizenonline.com/news/article/Kutztown-Universitv- 
freshman-dorm-evacuated-for-64615 1 l.php 

19. August 23, Flathead Beacon - (Montana) Increased fire activity expected as warm 
weather returns. Fire crews in Montana worked to contain at least 13 wildfire across 
the State August 23 that have burned more than 52,000 acres, prompted the evacuation 
of dozens of homes, and threaten hundreds of structures. 

Source: http://flatheadbeacon.com/2015/08/23/increased-fire-activity-expected-as- 
warm- weather-returns/ 



20. August 23, WCCO 4 Minneapolis - (Wisconsin) Firefighters respond to tragic scene 
of school bus accident in western Wis. Two people were killed and 16 others were 
injured in an accident involving a vehicle and school bus that collided at an intersection 
near Cumberland, Wisconsin, August 22. 

Source: http://minnesota.cbslocal.com/2015/08/23/firefighters-respond-to-tragic-scene- 
of-school-bus-accident-in- western- wis/ 
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21. August 23, Bend Bulletin - (Oregon) 64,701-acre Warm Springs fire could flare 
today. Crews reached 63 percent containment August 23 of the 64,701-acre Warm 
Springs Fire that has destroyed at least 32 structures on the Warm Springs Indian 
Reservation. Firefighters also worked to contain the Canyon Creek Complex Fire that 
has burned through 69,606 acres in Grant County. 

Source: http://www.bendbulletin.com/localstate/3444405-151/64701-acre-warm- 
springs-fire-could-flare-today# 

22. August 21, KWQC 6 Davenport - (Illinois) Rock Falls school evacuated because of 
gas leak. Students and staff were evacuated and classes were dismissed August 21 at 
Merrill Elementary School in Rock Falls due to a gas leak caused by construction 
workers that inadvertently hit a gas line. Crews reported to the scene and repaired the 
leak. 

Source: http://kwqc.com/2015/08/21/rock-falls-school-evacuated-because-of-gas-leak/ 

23. August 21, KCNC 4 Denver - (Colorado) Wildfire on western slope tops 100 acres, 
burns 4 outbuildings. Four outbuildings and about 12 other vehicles and pieces of 
equipment were destroyed due to the 130-acre Strawberry Fire burning west of Meeker, 
Colorado, August 21. 

Source: http://denver.cbslocal.com/2015/08/21/wildfire-on-westem-slope-tops-100- 
acres-bums-4-outbuildings/ 

24. August 21, WCBS 2 New York City - (New York) Police: Gunman shoots security 
officer dead, kills self at Yarick Street Federal building. A man died of a self- 
inflicted gunshot wound after entering a Federal building in New York August 21, and 
shooting and fatally injuring a security officer. The building was placed on lockdown 
and evacuated while officials investigated the incident. 

Source: http://newvork.cbslocal.com/2015/08/21/varick-federal-building-shooting/ 

For another story, see item 9 

Emergency Services Sector 

Nothing to report 

Information Technology Sector 

25. August 24, Securityweek - (International) Zero-day flaws found in Dolphin, Mercury 
browsers for Android. A security researcher discovered a vulnerability in the Dolphin 
Web browser for Android in which a man-in-the-middle (MitM) attacker could inject a 
specially crafted file to arbitrarily write files or execute remotely, as well as unpatched 
insecure Intent URI scheme implementation and path transversal vulnerabilities in the 
Mercury Web browser that could allow a remote attacker to read and write arbitrary 
files within the application’s data directory. 

Source: http://www.securityweek.com/zero-dav-flaws-found-dolphin-mercurv- 
browsers-android 
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26. August 24, Softpedia - (International) Google patches Android vulnerability that 
allowed arbitrary code execution. Google issued an update addressing a heap 
overflow vulnerability in the Android mediserver’s Audio Policy Service that an 
attacker could trigger to cause a continuous crash loop in the affected device. 

Source: http://news.softpedia.com/news/google-patches-android-vulnerability-that- 
allowed-arbitrary-code-execution-489905.shtml 

27. August 24, Securityweek - (International) Apple patches nine vulnerabilities in 
QuickTime for Windows. Apple patched nine vulnerabilities in QuickTime 7.7.8 for 
Microsoft Windows, including denial-of-service (DoS) flaws that can be exploited via 
specially crafted .MOV files, leading to a memory corruption condition that can cause 
QuickTime to terminate unexpectedly. 

Source: http://www.securityweek.com/apple-patches-nine-vulnerabilities-quicktime- 
windows 



For additional stories, see items 2 and 15 

Internet Alert Dashboard 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT IS AC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

Nothing to report 

Commercial Facilities Sector 

28. August 24, LancasterOnline.com - (Pennsylvania) Officials: discarded ashes blamed 
in $2 million Lititz apartment building blaze. Fire officials reported August 24 that 
discarded ash sparked a 2-alarm fire that displaced about 21 people and caused $2 
million damage to a large apartment building at Newport Commons in Warwick 
Township August 21. A resident and a firefighter suffered minor injuries and the Red 
Cross are assisting the displaced people. 

Source: http://lancasteronline.com/news/local/two-alarm-fire-in-apartment-building- 
just-outside-lititz/article ab9e5a5c-484d- 1 Ie5-930b-07f436c9267d.html 

29. August 23, WNBC 4 New York City - (New York) 22 injured, including 10 
firefighters, in fire at residential high-rise in Harlem: FDNY. New York City fire 
officials reported August 23 that a fire at the Riverside Park Community high-rise 
apartment in Manhattan injured 22 people, including 10 firefighters, and displaced 6 
residents. The fire is believed to have started in a 16 th -floor apartment and about 100 
firefighters managed to control the blaze. 

Source: http://www.nbcnewyork.com/news/local/NYC-Harlem-High-Rise-Fire- 
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Riverside-Community-7 -Hurt-FDNY -3226244 1 2.html 



30. August 22, WLWT 5 Cincinnati - (Ohio) Fire crews respond to 3-alarm fire at The 
Commons in Woodlawn. Firefighters responded to a 3-alarm fire at The Commons 
apartment complex in Woodlawn, August 22. The cause of the fire remains under 
investigation and there were no reports of injuries. 

Source: http://www.wlwt.com/news/fire-crews-respond-to-fire-at-the-commons-in- 
woodlawn/34864174 

31. August 21, WPV1 6 Philadelphia - (Pennsylvania) Bomb threat prompts evacuation 
at Willow Grove Mall. Montgomery County officials reported August 21 that a part of 
Willow Grove Mall was evacuated for approximately 3 hours after someone reportedly 
left a note with a bomb threat at the mall’s Macy’s store. 

Source: http://6abc.com/news/bomb-threat-prompts-evacuation-at- willow-grove- 
mall/95 11 97/ 

Dams Sector 



Nothing to report 
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NTAS 



NO ACTIVE ALERTS 
wwvv.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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